Where Did That Incriminating Evidence Come From?

Martin Westman (MSAB)

Abstract

With a big market for reused memory chips, it is not uncommon to find memory chips from previously used devices in brand new electronics. Most digital devices hold some sort of memory devices today, and in the world of recycling more and more memory old recycled memory chips find a new home in a brand new device, but have not forgotten their old data.

This causes a big problem for digital forensics investigators that are doing what they are best at - recovering old and deleted data. In this workshop we will look deeper into the market for reused chips, how this can cause a problem for forensic practitioners, and when claims from the defense can be discarded.